On Thu, 2 Dec 2004 12:23:04 -0800, Ana <(E-Mail Removed)> wrote:
>Hi Chuck,
>
>Thanks so much for your support!! :-)
>I did everything you said and the problem still remains. I also ran XP
>netdiag and the winsock is ok, the test ran successfully. I also reset TCP/IP.
>I don't understand what's happening.
>Here you have my ipconfig, it's in Portuguese but the placement of lines is
>the same as in english:
>Configuração IP do Windows
>
> Nome do sistema anfitrião. . . . .: Loomy
> Sufixo DNS principal. . . . . . . :
> Tipo de nó. . . . . . . . . . . . : Híbrido
> Rota IP activado. . . . . . . . . : Não
> WINS Proxy activado . . . . . . . : Não
> Lista de procura de sufixo de DNS : lan
>
>Adaptador ethernet Ligação de rede sem fios:
>
> Sufixo DNS específico da ligação. : lan
> Descrição . . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG
>Network
>
>Connection
> Endereço físico . . . . . . . . . : 00-0E-35-0F-94-2D
> DHCP activado . . . . . . . . . . : Sim
> Autoconfiguração activada . . . . : Sim
> Endereço IP . . . . . . . . . . . : 10.0.0.2
> Máscara de sub-rede . . . . . . . : 255.255.255.0
> Gateway predefinido . . . . . . . : 10.0.0.138
> Servidor DHCP . . . . . . . . . . : 10.0.0.138
> Servidores DNS. . . . . . . . . . : 10.0.0.138
> Concessão obtida. . . . . . . . . : sexta-feira, 3 de Dezembro de
>2004 19:35:32
> Concessão obtida válida até . . . : sexta-feira, 3 de Dezembro de
>2004 21:35:32
>
>Thanks so much!!
<SNIP>
Ana,
Is this a problem for all websites? Has this computer always had this problem?
Also, your NAT router ("10.0.0.138") apparently is your DNS server. Is it
configured that way on purpose? What make and model router are you using? Do
its instructions say explicitly to configure it this way?
Most NAT routers pass the IP address of your ISPs DNS servers to the computers.
Some will act as a DNS cache, but if this one doesn't, and you configure your
computer to assume that it does, you'll get this problem. But it will be a
universal problem - all websites will be unreachable.
Which is why I asked previously (but you did not answer).
Do you have this problem with all websites?
From a command window:
1) Ping
www.yahoo.com.
2) Ping 66.94.230.33.
Report success / exact text of error messages.
From your browser:
3) Browse
www.yahoo.com.
4) Browse 66.94.230.33.
Report success / exact text of error messages.
If the above is not helpful, if only some websites are unreachable, or if your
NAT router (what make and model?) WILL act as a DNS cache (maybe a router
problem then), then you might get clues from an analysis website, like PCPitStop
<http://www.pcpitstop.com/default.asp>.
You also may be a victim of a DNS / Hosts Hijack. You've already checked the
LSP / Winsock.
Search your entire system drive, including hidden and system folders, for file
"hosts". There is one legit copy, in C:\WINDOWS\system32\drivers\etc\ (for
Windows NT/2000/XP, for instance). The others are possibly bogus, and part (but
just part) of the problem.
Examine the contents of each copy of "hosts" found, using Notepad. Scroll to the
end of each Hosts file, by hitting Ctrl-End, then back up to the top, page by
page, before deciding that any "hosts" file is empty. Look out for blank lines
at the beginning and end of the file, after "localhost", placed there by an
exploit. Do not assume that a file is empty simply because you see "localhost"
followed by 50 blank lines!
Also, check carefully for spyware or viral infection. If you're having trouble
getting one of the websites listed below (since your problem is, after all,
getting websites DOHH), use one of these websites to get you an ip address:
All-NetTools:
http://www.all-nettools.com/tools1.htm
All-NetTools:
http://216.92.207.177/toolbox
DNSStuff:
http://www.dnsstuff.com/
DNSStuff:
http://69.2.200.183/
How current is your virus protection? Try one or more of these free online
virus scans, which should complement your current protection:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan>
<http://www.ravantivirus.com/scan/>
<http://security.symantec.com/ssc/home.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>
Now check for, and learn to defend against, additional problems - adware,
crapware, spyware.
Start by downloading each of the following additional free tools:
AdAware <http://www.lavasoftusa.com/>
CWShredder <http://www.majorgeeks.com/download4086.html>
HijackThis <http://www.majorgeeks.com/download.php?det=3155>
LSP-Fix <http://www.cexx.org/lspfix.htm>
WinsockXPFix <http://www.spychecker.com/program/winsockxpfix.html>
Spybot S&D <http://www.safer-networking.org/index.php?page=download>
Stinger <http://us.mcafee.com/virusInfo/default.asp?id=stinger>
TrendMicro Engine <http://www.trendmicro.com/download/dcs.asp>
TrendMicro Signatures <http://www.trendmicro.com/download/pattern.asp>
TrendMicro Instructions <http://www.trendmicro.com/ftp/products/tsc/readme.txt>
Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. Create a separate folder for the two TrendMicro files,
such as C:\TrendMicro - copy the downloaded files there (unzipped if necessary).
AdAware, CWShredder, and Spybot S&D have install routines - run them. The other
downloaded programs can be copied into, and run from, any convenient folder.
First, run Stinger. Have it remove any problems found.
Next, close all Internet Explorer and Outlook windows, and run CWShredder. Have
it fix all problems found.
Next, disable System Restore.
<http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm>
Boot your computer into Safe Mode.
http://support.microsoft.com/?id=315222
Run C:\TrendMicro\Sysclean.com. Delete any infectors found. Reboot your
computer, and re enable System Restore.
Next, run AdAware. First update it, configure for full scan
(<http://forums.spywareinfo.com/index.php?showtopic=11150>), then scan. When
scanning finishes, remove all Critical Objects found.
Next, run Spybot S&D. First update it, then run a scan. Trust Spybot, and
delete everything ("Fix Problems") that is displayed in Red.
Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save the
HJT Log.
<http://forums.spywareinfo.com/index.php?showtopic=227>
<http://forums.spywareinfo.com/index.php?showtopic=11150>
Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and please post a link to your forum posts, here):
Aumha: <http://forum.aumha.org/index.php>
Net-Integration: <http://forums.net-integration.net/>
Spyware Info: <http://forums.spywareinfo.com/>
Spyware Warrior: <http://spywarewarrior.com/index.php>
Tom Coyote: <http://forums.tomcoyote.org/>
If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.
--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
Similar Threads
